Tag: Authentication – RBAC – SOD – IRM (342)

How much crap does an IT specialist have to put up with today

Below are the IT and Business skill and technical certifications necessary for a long a successful IT career. Items to Consider Target Behaviors: Analysis and Problem Solving 1)  Follows technical interrelated sets of complex issues without difficulty 2)  Asks clarifying and shaping questions geared towards thoroughly assessing critical issues 3)  Demonstrates creative and occasionally innovative approaches to information… Continue reading How much crap does an IT specialist have to put up with today

My goodness where the heck is the information I need?

In the past and even more in the present employees found it difficult to locate the information and documents they need. The situation has several causes. The most prevalent problem is our lack of document organization and categorization. Employees experience pain when attempting to share documents with one another, save their documents in a common… Continue reading My goodness where the heck is the information I need?

HR Operating Policies and Procedures to Ensure Proper Access Removal

Reference: Security Guideline Physical and Environmental Security of Information Technology Resources. HR will ensure proper pre-employment screening of employee prior to employment. Reference HR Policy #. Upon completion of the HR pre-employment screening, Department Directors or designee will complete access request via User Access Request Site for appropriate access to applications. Link is available on… Continue reading HR Operating Policies and Procedures to Ensure Proper Access Removal

IT Security Guideline Maintenance of Record of Access Authorizations (Access Controls and Password Use)

Procedure User Access Requests will be tracked as follows: ISM Management System for IT administered systems / applications For Non-IT administered applications, emails are sent to the application administrators, who are then responsible for retaining the requests. HealthStream ChartMaxx Radiology PACS Cardiology PACS Medical Necessity Omnicell

Project Lift Plan Template

Project lift plan template will be developed during the Architecture phase prior to the first detail design effort. Network Convergence Due to the state of organization’s aging voice network infrastructure, the organization would benefit from a network convergence initiative.  This project would replace the organization’s voice infrastructure with equipment that enables the transmission of voice… Continue reading Project Lift Plan Template

Materials Project Planner Checklist

Materials Project Planner: Review for effect on current and planned production builds. Review for impact on inventory, requisitions, and material costs o  Can the recommended effectivity be supported? o  Is the description of change clear? Are the redlines clear and complete? o  Will existing stock require rework? What is required to accomplish this? Cost? o … Continue reading Materials Project Planner Checklist

Operations Engineering Checklist

Operations Engineer: Review for impact on test plans and procedures. Evaluate change for effects on requirements o  Can the recommended effectivity be supported? o  Is the description of change clear? Are redlines clear and complete? o  Will test plans or procedures require updating? Which ones? o  Will any software be affected? o  Will new equipment… Continue reading Operations Engineering Checklist

Manufacturing Engineer Checklist 2

Manufacturing Engineer: Review for effect on current and planned production builds. Review for impact on inventory, requisitions, and material costs o  Can the recommended effectivity be supported? o  Is the description of change clear? Are the redlines clear and complete? o  Will work instructions (WI) require updating? Which ones? o  Will any other assemblies be… Continue reading Manufacturing Engineer Checklist 2

Sample – User Roles Server Assessment Considerations – Part 1

Partial list of questions to consider. Initial reason for purchase / business problem Most common Use Cases  with respect to Provisioning and Identity Management a)  Delegation of permissions b) Property generation / validation c) User provisioning / de-provisioning Review Authentication Management model (i.e. resource(s) allocated to manage Authentication Business Benefits realized from initial investment, Describe… Continue reading Sample – User Roles Server Assessment Considerations – Part 1

Sample – ERP Manager Applications Roles

ERP Applications – Development This position will manage a team of developers that design, develop, implement and support custom programs and interfaces for a suite of applications for production and non-production environments.  This team will also be responsible for providing Tier 3 support for all applications issues escalating to the vendor as necessary to insure… Continue reading Sample – ERP Manager Applications Roles

Sample – User Roles Server Assessment Considerations – Part 2

Partial list of questions to consider. Business issue Recommendation Comments 0 time spent with / Managing Authentication today Dedicate resource time on solution to leverage tool and reduce AD administration time Agreement; reduce workload & leverage automation No Automation Create further policies Approval process needed for Groups and users (owner) Use built in approvals for… Continue reading Sample – User Roles Server Assessment Considerations – Part 2

Facial Recognition Device Vendor Considerations

Overview The Facial Recognition Reader standard considerations: Identify presence detection, Integrate with the standard Enterprise Authentication solutions that: Allow for fast access Allow for automatic logoff upon lack of presence detection. Take advantage of a centralized architecture, The recommended vendor standard facial recognition readers is: Sensible Vision; Sensible Vision works stand alone. Readers will be… Continue reading Facial Recognition Device Vendor Considerations

Passive Proximity Badge Reader and Sonar Device Vendor Considerations

Overview The Passive Proximity Badge Reader and Sonar Device vendor consideration will: Integrate with the standard existing / future Enterprise SSO solutions, Allow for fast access, Allow for password save (configurable time), Allow for tap out to lock or logoff the system, Work with several of the building access cards already being used in the… Continue reading Passive Proximity Badge Reader and Sonar Device Vendor Considerations

User ID Provisioning Challenges

Managing Heterogeneous Systems Today’s businesses have had to integrate their information systems and often combine disparate technologies. This becomes even more challenging as a result of business mergers and acquisitions.  To accommodate these changes, the IT department must administer a large number of heterogeneous systems and applications. It must also manage a huge influx of… Continue reading User ID Provisioning Challenges

Identity and Access Management Business Challenges

Web-Based Business Growth The growth of web-based businesses over the last two years has been substantial. The electronic business boom has attracted users by the billions, and online transacting has become the most convenient way to conduct business. Customers are no longer restricted by currency, geographic location or hours of operation, as web-based businesses accept… Continue reading Identity and Access Management Business Challenges

Sample Managed Project Services – Client On-Boarding Process

Program Management office (PMO) The PMO is set up in the early stages and includes “Managed Service Provider” Engagement Manager, “Managed Service Provider” Delivery Manager and Client Program Manager. PMO will provide the umbrella leadership for the entire transition process and during execution. It will have executive sponsorship from “Managed Service Provider” and Corporate and will… Continue reading Sample Managed Project Services – Client On-Boarding Process

IT Costs are not just associated with Compliance

Costs are not just associated with Compliance but other areas of the business… like keeping employees productive. If you look at one aspect of IT that relates to user productivity, Help Desk calls and their associated costs, you’ll see that on average nearly 70% of all helpdesk calls are associated with Security. (next slide security… Continue reading IT Costs are not just associated with Compliance

What is wrong with Corporate IT today?

This blog entry is one of the few we claim for our own, why because we truly believe when you read this you will see the value. We openly offer this opinion we only ask if you use any or all of these statements please give credit where credit is due. 1. IT Fragmented efforts… Continue reading What is wrong with Corporate IT today?

Top 5 Policy Issues

To advocate effectively for the industry on core public policy issues that impact directly upon consumers’ use and enjoyment of the Internet, the Counter Intrusion, Inc focuses on these consumer-oriented public policy issues: Identity theft Consumer Privacy Internet Security and Law Enforcement Content Regulation Unsolicited Commercial Email B2B and B2C liability  

Amount of data each day is unbelievable

We create terabtyes of data each day it’s like an ocean and each day data we create is wider and and further away, duplicate outdated incorrect corrupted. IT organizations have to get a handle on this. This is how identities are lost and customer confidence is lost. Medium Content Type TB / Yr High estimate… Continue reading Amount of data each day is unbelievable

Sample – Computer Systems Privacy Policy

For the protection of corporate, it’s employees and clients. Employee Privacy Corporate may collect, process, store and disseminate only that information regarding its employees which is necessary for the proper functioning of its business. Before corporate employees collect private information about workers, customers, or other people, the need for such information must first be documented… Continue reading Sample – Computer Systems Privacy Policy

Regulations Touches Everyone

Implications Regulations affect everyone Non-regulated still implies best practices No one-stop solutions Real time alerting a vital component of compliance Customers are looking for real-time help on the mainframe Legislative Background Fourth Amendment FCA Title III FISA ECPA CALEA Digital Privacy Act of 2000 Electronic Privacy Act of 2000 The Information Technology (IT) Management Reform… Continue reading Regulations Touches Everyone